How to handle authorization for changes on specific model properties?

Simple example: Book model has a price property. It can only be updated by user with permission "can-update-book-price". Is there something better than adding a PATCH endpoint that is protected by the permission and not including the property in the fillable of the model, so it can't be overridden by the PUT update endpoint when the whole object is sent? How to handle updates from Nova then? submitted by /u/iShouldBeCodingAtm
[link] [comments]